wordpress rest api exposed

projectdiscovery / nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

https://github.com/projectdiscovery/nuclei

MIT License

9.05k stars 2.59k forks source link

wordpress rest api exposed #6845

Closed joostgrunwald closed 1 year ago

joostgrunwald commented 1 year ago

Template for?

Wordpress rest api exposed

Details:

id: wordpress-rest-api-01 info: name: Wordpress REST API Exposed risk: Medium/Low

params:

root: '{{.BaseURL}}'

variables:

vul: | wp-json/ requests:
method: GET redirect: false url: >- {{.root}}/{{.vul}} headers:
- User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 detections:
- - StatusCode() == 200 && StringSearch("response", "routes")

pussycat0x commented 1 year ago

Hi @joostgrunwald, I wanted to inform you that we already have similar templates in place like CVE-2017-5487 and more. If you have anything specific in mind, please feel free to reopen this issue and share your ideas.